General
-
Target
5729a35b76d5e98b89cf013ca1b93aed
-
Size
360KB
-
Sample
220825-yeacvaaabj
-
MD5
5729a35b76d5e98b89cf013ca1b93aed
-
SHA1
412d40df4526c68a1b0398f4a4b0cd0fe18a866a
-
SHA256
4652709c58a2be46a1543c18f6d5c2e57b1fd1ac25cdb0b894e46e42456c3a6a
-
SHA512
332efdc32d3cb8086f8822e4dbab7652eebfb37a05913822b2a6a7740977eaebb245779b98284823c1f63d9ccc167b7c0bb3c4a17c6a37192b75b39772dd398f
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPNmv5+9exbaS5f5kjhm5BurT:EagCkDewqz5Rk1m5ErmI5
Static task
static1
Behavioral task
behavioral1
Sample
5729a35b76d5e98b89cf013ca1b93aed.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
5729a35b76d5e98b89cf013ca1b93aed
-
Size
360KB
-
MD5
5729a35b76d5e98b89cf013ca1b93aed
-
SHA1
412d40df4526c68a1b0398f4a4b0cd0fe18a866a
-
SHA256
4652709c58a2be46a1543c18f6d5c2e57b1fd1ac25cdb0b894e46e42456c3a6a
-
SHA512
332efdc32d3cb8086f8822e4dbab7652eebfb37a05913822b2a6a7740977eaebb245779b98284823c1f63d9ccc167b7c0bb3c4a17c6a37192b75b39772dd398f
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPNmv5+9exbaS5f5kjhm5BurT:EagCkDewqz5Rk1m5ErmI5
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-